Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e5a2469-e6d8-4ced-9d3c-dadb531904c6.roa
File: 4e5a2469-e6d8-4ced-9d3c-dadb531904c6.roa (raw, json)
Hash identifier: TTQxfgRWwsStnmucsMMfUTBjIgHUX+fAzO37fdGdpE4=
Subject key identifier: BE:C4:EC:02:FD:F0:90:B2:F1:77:FA:0E:35:31:A8:65:60:91:BE:7A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6AA1761DAF5F4D0B0463531DC969B0FB62DD3903
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e5a2469-e6d8-4ced-9d3c-dadb531904c6.roa
Signing time: Sun 31 May 2026 00:30:13 +0000
ROA not before: Sun 31 May 2026 00:30:13 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:a1:76:1d:af:5f:4d:0b:04:63:53:1d:c9:69:b0:fb:62:dd:39:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 00:30:13 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=a81ff5303d6ae9b7d5776beeda8461fcbeb0106683db8e131498a304fe154fc0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d5:34:10:a2:ee:f5:c0:62:e7:44:eb:9c:c1:
41:05:94:bb:78:ca:e5:ac:4c:3d:02:af:22:41:54:
f2:26:8c:23:07:4e:3c:18:32:73:aa:e7:b1:51:68:
da:c3:62:ad:70:9f:a3:ec:ad:e3:c5:5b:b6:8a:b6:
06:a1:11:5f:10:31:24:61:8f:ce:c0:4c:d5:d8:db:
20:53:4c:41:92:3d:c1:99:e8:91:66:50:49:40:b8:
3b:76:59:a5:1c:39:11:81:2d:89:67:9b:6b:4a:77:
0c:11:8d:37:99:c7:56:85:21:f0:da:32:34:2a:ab:
c3:ed:42:d3:0b:c4:e5:aa:94:37:70:9d:23:43:ef:
19:b2:94:d7:7e:f2:ce:49:75:e5:1a:03:b0:96:da:
20:43:ff:d4:ce:05:d5:ad:64:1f:4c:95:c2:d3:9a:
a6:07:31:eb:66:ce:c3:2d:2c:11:c6:f4:30:8e:62:
02:e4:03:93:a0:0f:1a:af:9f:70:a5:c2:a4:43:c2:
57:7a:b2:5b:4b:c9:82:d3:23:ae:25:86:32:c9:38:
c2:fa:f9:03:64:08:03:42:83:86:39:7f:83:43:e6:
65:c6:aa:18:c6:59:21:69:4f:2d:b6:ce:84:cc:c0:
89:c9:8e:a1:b6:58:3d:a4:4a:44:a4:19:cb:30:a6:
56:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C4:EC:02:FD:F0:90:B2:F1:77:FA:0E:35:31:A8:65:60:91:BE:7A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e5a2469-e6d8-4ced-9d3c-dadb531904c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:880::/48
Signature Algorithm: sha256WithRSAEncryption
91:dd:20:98:ba:31:3e:c4:3f:48:8d:87:86:d2:32:6a:df:28:
15:85:90:7b:00:64:05:54:6e:88:f3:a0:c3:2f:8c:cd:6d:a5:
a4:cd:d0:d2:1e:17:d6:68:e2:74:8f:61:1e:04:a9:5d:6a:b4:
c9:93:5f:af:23:ea:80:7f:63:a2:bd:b8:72:09:8d:fe:4e:7f:
20:8c:f4:7d:2d:18:7d:8c:86:79:53:9a:15:21:2b:b9:d1:64:
e5:fb:cf:e9:e2:0b:98:bc:0b:c0:ba:93:70:cf:12:b5:fb:14:
f8:fe:f5:35:c1:c9:33:91:66:41:c7:47:47:83:e7:93:76:ae:
06:ef:f9:0d:fa:a5:bb:d7:1e:c8:2e:d9:08:ea:77:d1:9c:74:
0f:73:75:43:7a:8a:8f:12:33:f9:ca:af:10:31:f3:ee:cc:06:
b9:24:92:d7:f3:03:c4:0c:a6:44:8c:8f:fc:80:13:20:46:27:
fa:51:0d:23:77:70:32:15:d8:a4:32:fb:44:be:7a:6a:b8:87:
19:cb:b6:ac:98:b4:2a:82:e4:ab:05:8e:58:e3:71:e2:28:84:
46:b0:e5:3e:78:22:38:4a:27:d4:5a:41:28:0a:fb:b6:ed:17:
64:c1:4c:f4:29:43:24:e2:12:7b:42:f4:a9:7c:cc:69:47:7a:
82:b1:11:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:22 2026 by rpki-client